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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

Claim 1. (previously presented) A network comprising: 

IPsec processing apparatuses, which use an IPsec (Internet Protocol security protocol) 
for encrypting and authenticating communications via the Internet between two different 
centers; and 

an IPsec setting apparatus, which manages IPsec settings of the IPsec processing 
apparatuses, 

wherein in response to receiving a request from a first IP processing apparatus to 
communicate with a second IPsec processing apparatus, the IPsec setting apparatus transmits 
a request to the second IPsec processing apparatus and upon receiving a reply to the request 
from the second IPsec processing apparatus the IPsec setting apparatus transmits a common 
encryption key to the first and second IPsec process apparatuses to be used to encrypt and 
authenticate IPsec communications between the first and second process apparatuses. 

Claim 2. (Cancelled) 

Claim 3. (previously presented) The network of claim 1 , 
wherein the second IPsec processing apparatus transmits a request for the 
communication message as a reply to the request received from the IPsec setting apparatus. 

Claim 4. (previously presented) The network of claim 1 , 

wherein when there is no response from the second IPsec to the request from the IPsec 
setting apparatus the IPsec setting apparatus notifies the first IPsec processing apparatus that 
there is no response from said second IPsec processing apparatus. 

Claim 5. (previously presented) The network of claim 1, 

wherein said IPsec setting apparatus generates SA (Security Association) parameters, 
to be used in the IPsec communication between the first and the second IPsec processing 
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apparatuses, based on the contents of the request message and contents of IPsec policies 
stored by the IPsec setting apparatus. 

Claim 6. (previously presented) The network of claim 1 , 
wherein said IPsec setting apparatus sends a distribution message including the 
policies of said IPsec and the SA parameters in response to the request message. 

Claim 7. (previously presented) The network of claim 1 , 

wherein said IPsec setting apparatus generates the common encryption key to be used 
in encryption and authentication of the IPsec communications between the first IPsec 
processing apparatus and the second IPsec processing apparatus and transmits the generated 
common encryption key to the said IPsec processing apparatus. 

Claim 8. (previously presented) An IPsec setting apparatus managing IPsec 
setting of IPsec processing apparatuses, which use an IPsec (Internet Protocol security 
protocol) for securing communication via the Internet between two different centers, 

wherein said IPsec setting apparatus manages IPsec policies applied among theJPsec 
processing apparatuses, and 

wherein said IPsec setting apparatus specifies the IPsec policies to be applied between 
a first IPsec processing apparatus, requesting communication with a second IPsec processing 
apparatus, and the second IPsec processing apparatus based upon contents of the_request to 
the IPsec setting apparatus from the first IPsec processing apparatus for communication with 
the second IPsec processing apparatus. 

Claim 9. (Cancelled) 

Claim 10. (previously presented) The IPsec setting apparatus of claim 8, 
wherein said IPsec setting apparatus upon receiving the request message from the first 
IPsec processing apparatus, transmits a request startup message to the second IPsec 
processing apparatus, which is an opposite party of communication of the first IPsec 
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processing apparatus which has transmitted the request message, in order to cause the second 
IPsec processing apparatus to transmit a request message for the communication. 

Claim 11. (previously presented) The IPsec setting server apparatus of claim 10, 
wherein the IPsec setting apparatus, when there is no response to the request startup 
message from the second IPsec processing apparatus, notifies the first IPsec processing 
apparatus which has transmitted the request message that there is no response from the 
second IPsec processing apparatus of the opposite party of communication. 

Claim 12. (previously presented) The IPsec setting apparatus of claim 8, 
wherein said IPsec setting apparatus generates SA (Security Association) parameters 
used in the IPsec communication between the first IPsec processing apparatus and the second 
IPsec processing apparatus based upon the contents of the request message and contents of 
the IPsec policies stored by the IPsec setting apparatus 

Claim 13. (previously presented) The IPsec setting apparatus of claim 8, 
wherein said IPsec setting apparatus simultaneously transmits to the first IPsec 
processing apparatus and to the second IPsec processing apparatus a message including at 
least the policies and the SA parameters for IPsec communication between the first IPsec 
processing apparatus and the second IPsec processing apparatus in response to the request 
message. 

Claim 14. (previously presented) The IPsec setting apparatus of claim 8, 
wherein said IPsec setting apparatus generates a common encryption key to be used in 

encryption and authentication of IPsec communication and distributes the generated common 

encryption key to the first and second IPsec processing apparatuses. 

Claim 15. (previously presented) An IPsec processing apparatus using an IPsec 
(Internet Protocol security protocol) on the Internet, 

wherein said IPsec processing apparatus receives from an IPsec setting apparatus 
managing communication a packet containing the IPsec to be applied to communications with 
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another IPsec processing apparatus, determines whether or not to request from the IPsec 
setting apparatus a setting for IPsec communication, and wherein the IPsec processing 
apparatus transmits a request for communication with the other IPsec processing apparatus to 
the IPsec setting apparatus in order to receive from the IPsec setting apparatus a setting for 
IPsec communication. 

Claim 16. (Cancelled) 

Claim 17. (previously presented) The IPsec processing apparatus of claim 15, 
wherein, upon receiving a request startup message from an IPsec setting apparatus the 

IPsec processing apparatus transmits a request for communication with another IPsec 

processing apparatus to the IPsec setting apparatus. 

Claim 18. (previously presented) The IPsec processing apparatus of claim 15, 
wherein said IPsec processing apparatus includes means for setting an SPD_(Security 
Processing Database), in which policies for applying said IPsec is recorded, and an SAD 
(Security Association Database), in which an SA (security Association) necessary for 
subjecting an individual communication to the IPsec processing is stored, based upon a 
message received from the IPsec setting apparatus. 

Claim 19. (previously presented) The IPsec processing apparatus of claim 15, 
wherein said IPsec processing apparatus receives from the IPsec setting apparatus a 

common encryption key to be used in encryption and authentication of said IPsec 

communication 

Claim 20 (previously presented) The IPsec processing apparatus of claim 15, 
wherein the IPsec processing apparatus retransmits the request for communication to 

the IPsec setting apparatus and receives new setting information before a term of validity for 

the SA expires. 
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Claim 2 1 . (previously presented) An IPsec setting method for a network 
comprising: 

receiving from a first IPsec processing apparatus a request for communication with a 
second IPsec processing apparatus; 

in response to the received request, sending a request to the second IPsec processing 
apparatus, 

receiving a reply to the sent request from the second IPsec processing apparatus, 
in response to the reply from the second IPsec processing apparatus, retrieving IPsec 
policy rules from memory and generating IPsec settings parameters based on the content of 
the request from the first IPsec processing apparatus and the retrieved policy rules; and 

transmitting the generated IPsec settings to the first and second IPsec processing 
apparatuses 

Claim 22. (Cancelled) 

Claim 23 . (previously presented) The IPsec setting method of claim 2 1 , 
wherein the request sent to the second IPsec is a startup message and the reply 
received from the second IPsec is a request for the communication. 

Claim 24. (previously presented) The IPsec setting method of claim 21, 
wherein when there is no reply to the request sent to the second IPsec processing 

apparatus, notifying the first IPsec processing apparatus that there is no response from the 

second IPsec processing apparatus. 

Claim 25. (previously presented) The IPsec setting method of claim 21 , 
further including in response to a reply from the second IPsec processing apparatus, 
generating SA (Security Association) parameters to be used in the IPsec communication 
between the first and second IPsec processing apparatuses based on contents of the request 
from the first IPsec processing apparatus message and the retrieved policy rules. 

Claim 26. (previously presented) The IPsec setting method of claim 2 1 , 
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further comprising transmitting a distribution message including at least the retrieved 
policies and generated SA parameters in response to receiving the request. 

Claim 27. (previously presented) The IPsec setting method of claim 21 , 
further comprising, generating a common encryption key to be used in encryption and 
authentication of IPsec communication between the first and second IPsec processing 
apparatuses and transmitting the generated encryption key to first and second IPsec 
processing apparatuses. 

Claim 28. (previously presented) The IPsec setting method of claim 2 1 , 
further compromising, upon receiving at one of the first and second IPsec processing 
apparatuses a communication to which an IPsec should be applied, theJPsec processing 
apparatus determines whether or not to request an IPsec setting from an IPsec setting 
apparatus. 

Claim 29. (previously presented) The IPsec setting method of claim 2 1 , 
wherein the first IPsec processing apparatus transmits a request for communication 

with the second IPsec processing apparatus to an IPsec setting apparatus in order to acquire a 

setting for the IPsec to be used during the communication. 

Claim 30. (previously presented) The IPsec setting method of claim 26, 
wherein the IPsec processing apparatuses store the retrived policies transmitted in the 

distribution message in a respective SPD, and store the S A parameters transmitted in the 

distribution message in a respective SAD 

Claim 31. (Canceled). 

Claim 32. (previously presented) The IPsec setting method of claim 2 1 , 
further comprising receiving a second request from the first IPsec processing 
apparatus for communication with the second IPsec processing apparatus before a term of the 
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validity of an SA expires and in response generating and transmitting new IPsec setting to the 
first and second IPsec processing apparatuses. 

Claim 33. (New) The network of claim 1 wherein the common encryption key 
transmitted by the IPsec setting apparatus in response to the request depends on an address of 
the first IPsec processing apparatus making the request. 

Claim 34. (New) The network of claim 1 wherein the common encryption key 
transmitted by the IPsec setting apparatus in response to the request depends on an address of 
the second IPsec processing apparatus for which communication is requested. 

Claim 35 (New) The network of claim 1 wherein the common encryption key 
transmitted by the IPsec setting apparatus in response to the reqeust depends on addresses of 
the first IPsec processing apparatus making the request and the second IPsec processing 
apparatus for which communication is requested. 
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